Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Tech and Talk » OS and Software » All Things Unix » SSH scanning.
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Linux Linux on the wall... »
« cleaning a deb system  
AuthorAll Replies


elboricua
El Subestimado
Premium
join:2001-08-12
Bronx, NY


1 edit
reply to elboricua
Re: SSH scanning.

Most of the IP's that have been scanning me are from Quebec and from the UK. In my case the usernames being tried are admin and user. With some root thrown in for good measure.

Some snippits from my logs.

Jul 19 14:42:02 Vulcan-Raven sshd[3959]: Illegal user admin from 213.86.59.248
Jul 19 14:42:02 Vulcan-Raven sshd[20578]: input_userauth_request: illegal user a
dmin
Jul 19 14:42:02 Vulcan-Raven sshd[20578]: Failed password for illegal user admin
from 213.86.59.248 port 40497 ssh2
Jul 19 14:42:02 Vulcan-Raven sshd[20578]: Received disconnect from 213.86.59.248
: 11: Bye Bye
Jul 19 14:42:03 Vulcan-Raven sshd[6934]: Illegal user guest from 213.86.59.248
Jul 19 14:42:03 Vulcan-Raven sshd[30903]: input_userauth_request: illegal user g
uest
Jul 19 14:42:03 Vulcan-Raven sshd[30903]: Failed password for illegal user guest
from 213.86.59.248 port 40525 ssh2
Jul 19 14:42:03 Vulcan-Raven sshd[30903]: Received disconnect from 213.86.59.248
: 11: Bye Bye
Jul 19 14:42:03 Vulcan-Raven sshd[32021]: Illegal user admin from 213.86.59.248
Jul 19 14:42:03 Vulcan-Raven sshd[9129]: input_userauth_request: illegal user ad
min
Jul 19 14:42:03 Vulcan-Raven sshd[9129]: Failed password for illegal user admin
from 213.86.59.248 port 40539 ssh2
Jul 19 14:42:04 Vulcan-Raven sshd[9129]: Received disconnect from 213.86.59.248:
11: Bye Bye
Jul 19 14:42:04 Vulcan-Raven sshd[31823]: Illegal user admin from 213.86.59.248
Jul 19 14:42:04 Vulcan-Raven sshd[24870]: input_userauth_request: illegal user a
dmin

EDIT:

Added loginfo
Thread is
Forums » Tech and Talk » OS and Software » All Things UnixLinux Linux on the wall... »
« cleaning a deb system  


Friday, 27-Nov 00:42:43 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [112] Time Warner Cable Fires Broadside At Broadcasters
· [109] New AT&T Ad Campaign Hits Back At Verizon
· [95] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [70] TiVo Sees Record Customer Losses
· [62] In-Flight Internet Headed For Bumpy Landing?
· [56] Thanksgiving Open Thread
· [37] ICANN Slams DNS Redirection
· [36] Senators Want ACTA Made Public
· [35] EFF Wages War On Fine Print
Most people now reading
· Newegg Black Friday Sale started [Users Find Hot Deals]
· Not strictly "Home" related - but WOW anyways... [Home Repair & Improvement]
· Bell Response to PIPEDA Request [TekSavvy]
· I'll Just Unplug That... [No, I Will Not Fix Your #@$!! Computer]
· Windows 7 boot manager editing questions [Microsoft Help]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Only firefox accesses Internet? [Security]
· Connecting to Google Voice Via SIP [VOIP Tech Chat]
· Whats the big deal about being "Old School"....? [World of Warcraft]
· HOW-TO: QoS and Tomato (fixes "choppy voice") [MagicJack]